ThreatList: Almost All Security Pros Believe Election Systems Are at Risk

As the U.S. midterm election season gets underway in earnest, concerns about the ability to hack the vote is more in the spotlight than ever. A fresh survey from Venafi has found that a full 93 percent of security pros are concerned about cyber-attacks targeting election infrastructure. The poll,...

Fighting the Skills Gap Via Industry Leading Research and Inspiring Events

By Kevin Simzer Among the headline-grabbing reports of election hacking, nation-state raids on utilities firms, and mega-data breaches, few outside the industry ask the question: Did the cybersecurity skills shortage play a part? It’s impossible to say for sure. However, what we do know is that...

10 Endpoint Security Problems Solved by the Cloud – Getting The Help You Need

Last week we looked at how the cloud helps you respond quickly to threats. This week, we’re going to examine why the cloud outperforms traditional AV when it comes to getting the help you need. It's You vs. Them Once upon a time, viruses were produced by individual hackers who were more intereste...

Microsoft Windows: Turn on MSDT interactive communication with support provider

This policy setting configures Microsoft Support Diagnostic Tool MSDT interactive communication with the support provider. MSDT gathers diagnostic data for analysis by support professionals. If you enable this policy setting, users can use MSDT to collect and send diagnostic data to a support...

Cyber Security Training Courses – CISA, CISM, CISSP Certifications

Believe it or not, but any computer connected to the Internet is vulnerable to cyber attacks. With more money at risk and data breaches at a rise, more certified cybersecurity experts and professionals are needed by every corporate and organisation to prevent themselves from hackers and cyber...

Lynis 2.6.6 - Security Auditing Tool for Unix/Linux Systems

We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...

Active Directory Reconnaissance: ADRecon

ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...

PSA: Recruitment portals and job sites at risk

Readers of Malwarebytes Labs aren't new to the social engineering tactics of malcontents to get users to respond to fake job offers via email. In 2014, we wrote about spam claiming to be from the recipient's supposed work application to a "Career Services Department," only to be redirected to a...

Search and Dump System Configuration: otseca

The main assumption of creating this tool was easier and faster delivery of commands sets to be performed on customer environments. As a result of such a scan I wanted to get the most useful information about system components that will be subjected to penetration tests and audits at a later time...

Register for Carbon Black’s 2018 Customer Conference – Cb Connect in NYC – Oct. 10 & 11

Cb Connect, Carbon Black’s premier customer and partner event of the year, heads to New York City this fall for a two-day conference at Center 415, where you’ll join hundreds of security professionals to discuss: Moving your endpoint security to the cloud Best practices for threat hunting and...

10 Endpoint Security Problems Solved by the Cloud – An Introduction

Question: Where do 70% of successful breaches begin? Answer: The endpoint. The State of Endpoint Security Traditional defensive security solutions are fighting a losing battle against hackers and malware. With each day, new attacks and viruses appear and keeping systems safe is like bailing out a...

Description of the security update for the Windows DNSAPI remote code execution vulnerability in Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: June 12, 2018

Description of the security update for the Windows DNSAPI remote code execution vulnerability in Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: June 12, 2018 Summary A remote code execution vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to...

Survey: 27 Percent of IT professionals receive more than 1 million security alerts daily

Imagine trying to tackle over one million security alerts in a day. That number is so huge that it may sound like hyperbole, but this is exactly what many security teams face. Dealing with such a high volume of potential threats on a regular basis can quickly lead to alert fatigue. Sure, we expec...

IRS Warns Tax Professionals of Phishing Scam

The Internal Revenue Service IRS has issued a news release warning tax professionals to beware of a new phishing email scam. Cyber criminals posing as state accounting and professional associations have been sending emails to entice their targets to reveal login credentials. Tax practitioners...

AWS Certified Cloud Practitioner: A Valuable Certification for Professionals in Non-Technical Roles

Within the past year, AWS unveiled what is arguably one of the best programs they have ever offered to non-technical professionals in the AWS Partner Network APN: the AWS Certified Cloud Practitioner certification. The program, which is especially valuable for those in sales or marketing roles,...

Phishing Spy Campaign Targets Top Mideast Officials

Researchers have discovered a phishing campaign that infected Android devices with custom surveillance-ware bent on extracting data from top officials, primarily in the Middle East. Researchers at Lookout Security told Threatpost that the tool, dubbed Stealth Mango, has been used to collect over ...

Description of the security update for the remote code execution vulnerability in Windows Server 2008: June 12, 2018

Description of the security update for the remote code execution vulnerability in Windows Server 2008: June 12, 2018 Summary A remote code execution vulnerability exists in the way that Windows handles objects in memory. To learn more about the vulnerability, go to CVE-2018-8136. More Information...

MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009

MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009 INTRODUCTION Microsoft has released security bulletin MS09-043. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

Description of the security update for Excel 2003: October 10, 2006

Description of the security update for Excel 2003: October 10, 2006 Microsoft has released security bulletin MS06-059. The security bulletin contains all the relevant information about the security update for Microsoft Office Excel 2003. This information includes file manifest information and...

Announcing: new British Standard for cyber risk and resilience

Technology is an integral part of the fabric of everyday life. There is almost no organization that does not rely on digital services in some way in order to survive. The opportunity that technology provides also brings with it more vulnerabilities and threats as organizations and data become mor...